Privacy Policy

1. Introduction

Shanghai Suhan Technology Co., Ltd., operating as Story Light and accessible via the domain storylights.lat, is committed to protecting the privacy and security of every individual who visits our website, interacts with our content, or engages with our services. This Privacy Policy explains in detail how we collect, use, disclose, and safeguard your personal information when you access or use our website and any related services, features, content, or applications offered by Story Light.

By accessing or using our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website immediately. We reserve the right to update or modify this Privacy Policy at any time, and such changes will be effective immediately upon posting the revised policy on this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

2. Types of Data Collected

2.1 Personal Data

Personal Data refers to any information that can be used to identify you as an individual, either directly or indirectly. When you interact with our website — for example, by filling out our contact form, subscribing to our newsletter, or sending us an inquiry — we may collect the following categories of Personal Data:

• Full name and any professional or organizational affiliation you choose to provide
• Email address and, where applicable, telephone number
• The subject line and body content of any message or inquiry you submit through our contact form
• Any other personal details you voluntarily include in your communication with us

2.2 Usage Data

Usage Data is collected automatically when you visit our website and may include information such as your IP address, browser type and version, the pages you visit on our site, the time and date of your visit, the duration of time spent on each page, unique device identifiers, and other diagnostic data. This information is collected through server logs and standard internet protocols and is used solely for the purpose of maintaining and improving the performance and security of our website.

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to monitor activity on our website and to retain certain information that helps us understand how visitors interact with our content. Cookies are small text files that are placed on your device by a web server and that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our website may not function as intended. The types of cookies we use include:

• Essential Cookies: Necessary for the basic operation and security of the website
• Preference Cookies: Remember choices you make, such as language preferences
• Analytics Cookies: Help us understand how visitors engage with our site so we can improve the experience

3. Purposes of Data Processing

Shanghai Suhan Technology Co., Ltd. processes the data described above for the following specific and legitimate purposes:

• To provide, operate, maintain, and improve our website and the services we offer
• To respond to your inquiries, comments, questions, and requests submitted through our contact form or via email
• To send you our newsletter where you have explicitly subscribed, including updates about exhibitions, new installations, and stories from the Story Light community
• To understand and analyze how visitors use our website so that we may enhance the user experience and develop new features
• To detect, prevent, and address technical issues, security vulnerabilities, or fraudulent activity
• To comply with applicable legal obligations and to enforce our Terms of Service

We will not use your personal data for any purpose that is incompatible with the purposes stated above without providing you with prior notice and, where required by law, obtaining your consent.

4. Legal Basis for Processing (GDPR)

For individuals located in the European Economic Area (EEA), our legal basis for collecting and processing your personal information depends on the specific context in which we collect it. Shanghai Suhan Technology Co., Ltd. processes your personal data only when:

• You have given your explicit and informed consent for one or more specific purposes
• The processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
• The processing is necessary for compliance with a legal obligation to which we are subject
• The processing is necessary for the purposes of our legitimate interests, provided that those interests are not overridden by your data protection rights and fundamental freedoms

In any case where the legal basis is consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.

5. Data Sharing and Disclosure

We do not sell, trade, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share information in the following limited circumstances:

• Service Providers: We may share data with trusted third-party companies and individuals who assist us in operating our website, conducting our business, or providing services to you — for example, website hosting providers and email delivery services. These service providers are contractually bound to process your data only on our instructions and in compliance with this Privacy Policy.
• Legal Compliance: We may disclose your information where required to do so by law, regulation, legal process, or governmental request, or where we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our website of any change in ownership or use of your personal data.

6. Data Security

We implement and maintain appropriate technical, administrative, and physical security measures designed to protect the confidentiality, integrity, and availability of your personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit using Transport Layer Security (TLS) protocols
• Regular security assessments and vulnerability scanning of our systems
• Access controls that limit data access to authorized personnel who require it for legitimate business purposes
• Secure data storage practices and network monitoring

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is one hundred percent secure. We cannot guarantee absolute security of your data, but we are committed to promptly notifying you and relevant authorities in the event of a data breach as required by applicable law.

7. Your Data Protection Rights

7.1 General Data Protection Regulation (GDPR) Rights

If you are a resident of the European Economic Area, you have the following rights under the GDPR:

• The right to access your personal data and obtain a copy of the information we hold about you
• The right to rectify any inaccurate or incomplete personal data concerning you
• The right to erasure of your personal data under certain conditions, also known as the right to be forgotten
• The right to restrict processing of your personal data in specific circumstances
• The right to data portability, meaning you may request that we transfer your data to another organization or directly to you in a structured, commonly used, and machine-readable format
• The right to object to processing of your personal data where we rely on legitimate interests as the legal basis
• The right to withdraw consent at any time where we rely on your consent to process your data

7.2 California Consumer Privacy Act (CCPA) Rights

If you are a resident of California, United States, you have the following rights under the CCPA:

• The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)
• The right to request deletion of your personal information that we have collected, subject to certain exceptions
• The right to opt out of the sale of your personal information (again, we do not sell personal information)
• The right to non-discrimination for exercising any of your CCPA rights

To exercise any of the rights described above, please contact us using the information provided in the Contact Information section at the end of this policy. We will respond to your request within the timeframes required by applicable law and may need to verify your identity before processing your request.

8. Children's Privacy

Our website and services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children under 16 years of age. If we become aware that a child under 16 has provided us with personal data without verifiable parental consent, we will take immediate steps to delete such information from our servers. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us immediately so that we can take the necessary actions to remove that information.

9. International Data Transfers

Your information, including personal data, may be transferred to and maintained on servers located outside of your country, province, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Shanghai Suhan Technology Co., Ltd. is based in Shanghai, China, and your data may be processed in China or in any other country where our service providers operate.

If you are located outside China and choose to provide information to us, please note that we transfer the data, including personal data, to China and process it there. Your consent to this Privacy Policy, followed by your submission of such information, represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

10. Third-Party Links

Our website may contain links to external websites, platforms, or services that are not owned, operated, or controlled by Shanghai Suhan Technology Co., Ltd. This Privacy Policy applies solely to information collected by our website. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. The inclusion of any link does not imply our endorsement of the linked site or its content.

11. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, operational requirements, legal obligations, or for other legitimate reasons. When we make changes, we will revise the Last updated date at the top of this page and, where the changes are material, we will provide a more prominent notice — such as by posting an announcement on our homepage or by sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about our data protection practices. Your continued use of our website after any modification to this policy constitutes your acceptance of the updated terms.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, or if you wish to exercise any of your rights as described in this policy, please contact us using the details below:

Shanghai Suhan Technology Co., Ltd.
Room 277, Building 8, No. 128 Cheting Highway
Chedun Town, Songjiang District
Shanghai, 200000, China

Email: wei@storylights.lat
Phone: +14258712637
Website: storylights.lat

We are committed to resolving any concerns you may have about our handling of your personal data. If you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with the supervisory authority in your country of residence.